CVE-2026-80116: Exposed IOCTL with Insufficient Access Control in PassMark Software PerformanceTest

PassMark Software PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in the DirectIo64.sys driver. The vulnerability arises from exposed IOCTLs that do not validate device selection, register offset, or value, allowing local users to obtain device handles and issue arbitrary PCI configuration space read/write operations. Exploitation can enable Bus Master DMA on any PCI device, halt storage controller I/O by clearing command registers, or remap Base Address Registers to redirect DMA to attacker-chosen physical addresses.

Local attackers with limited privileges can escalate their privileges by exploiting the exposed IOCTLs to modify hardware configurations. This includes enabling DMA on PCI devices, disrupting storage controller operations, and redirecting DMA to attacker-controlled memory, potentially leading to system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or vendor advisory is provided, users should monitor official PassMark Software channels for updates and avoid running vulnerable versions with untrusted local users.